Repository navigation

#

etw-bypass

Website
Wikipedia

thomasxm / BOAZ_beta

Multilayered AV/EDR Evasion Framework

boaz code-injection obfuscation av-bypass av-edr-bypass av-evasion edr-bypass etw-bypass payload-generator pe-packer process-injection red-teaming red-teaming-tools red-ream antivirus-evasion

C++

617

102

2 天前

BlackSnufkin / NyxInvoke

NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

amsi-bypass etw-bypass offensive-security red-team Rust

Rust

206

31

2 个月前

EvilBytecode / Lifetime-Amsi-EtwPatch

Two in one, patch lifetime powershell console, no more etw and amsi!

amsi-bypass amsi-evasion amsi-patch etw etw-bypass pentesting red-teaming fud

Go

88

17

10 个月前

Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.

amsi-bypass donut etw-bypass Go Shell pe2shc pe2shellcode

Go

53

5

2 年前

Chainski / PandaLoader

A WIP shellcode loader tool which bypasses AV/EDR, coded in C++, and equipped with a minimal console builder.

bypass-antivirus edr-bypass etw-bypass evasion Malware obfuscation pe-loader PowerShell Shell shellcode-loader persistence crypter payload-generator redteam

C++

44

6

6 天前

0xflux / ETW-Bypass-Rust

Event Tracing for Windows EDR bypass in Rust (usermode)

edr edr-bypass edr-evasion ethical-hacking ethical-hacking-tools etw etw-bypass Hacking Malware malware-research pentest pentest-tool pentesting red-team redteam redteam-tools redteaming Rust

Rust

19

2

10 个月前

EvilBytecode / ETW-Patch

code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).

av-evasion etw etw-bypass evasion fud

Go

8

1

10 个月前

Chainski / Lifetime-Amsi-EtwPatch

Loads a C# binary in memory within powershell profile, patching AMSI + ETW.

amsi-bypass amsi-evasion amsi-patch etw etw-bypass fud Nim pentesting-tools PowerShell red-teaming offensive-security

Nim

4

2

10 个月前

Remove ETW providers from session &ETW session hijack

bypass etw etw-bypass

C++

0

0

1 个月前